This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
File:                     46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft (raw, json)
Hash identifier:          GTC+4oQ4AxwtL+8pgLepFTkegq0gvEUDKKCh3WSE29I=
Subject key identifier:   A0:BF:53:D8:61:D6:A7:25:A0:DD:9E:8F:20:CB:C7:BB:11:E4:83:3D
Authority key identifier: 46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60
Certificate issuer:       /CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
Certificate serial:       585654064012179576DE9B7780429FC7401600AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
Manifest number:          011A
Signing time:             Sat 20 Dec 2025 15:16:12 +0000
Manifest this update:     Sat 20 Dec 2025 15:11:12 +0000
Manifest next update:     Sun 21 Dec 2025 17:17:12 +0000
Files and hashes:         1: 34352e3138332e3230302e302f32322d3332203d3e20323639343033.roa (hash: TivatVBFzmKwFIAL2W3c9etwcicKDT6C+punMfL6Amw=)
                          2: 46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl (hash: a+c68rm1DErPlSPMEOIR2vSojS9fJSAZewLvBPYiI/Y=)
                          3: 323830343a363431343a3a2f33322d313238203d3e20323639343033.roa (hash: TXu6Bd9rx8rdxxd+L5vshG+EFZ6i7gzIUQaxq5oxECM=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl
                          rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 17:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:56:54:06:40:12:17:95:76:de:9b:77:80:42:9f:c7:40:16:00:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E84850835B7708ECE5E3073FFEA7A8DF9BEA60
        Validity
            Not Before: Dec 20 15:11:12 2025 GMT
            Not After : Dec 21 17:17:12 2025 GMT
        Subject: CN=A0BF53D861D6A725A0DD9E8F20CBC7BB11E4833D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:8c:5a:db:2c:ba:e2:bd:07:85:b3:06:1c:
                    8f:02:0e:03:37:a8:86:2a:49:1a:a5:2e:f6:37:83:
                    ce:d4:6d:fd:0a:98:9b:da:0b:11:0f:34:4e:ba:12:
                    de:4d:7b:95:1e:ce:37:e3:8c:2f:a0:dd:cd:f8:70:
                    c9:16:ab:48:5c:2b:64:a9:15:83:9e:f2:0a:00:57:
                    10:1f:73:6a:5e:c6:c6:39:e3:ef:aa:f3:6f:69:3c:
                    b7:3b:69:df:a7:ee:19:51:93:44:e9:1a:72:a8:74:
                    b5:50:ce:bb:e5:fb:b6:98:31:c4:f3:8e:6f:52:ee:
                    28:03:e0:47:8a:5b:8d:28:e7:8d:cf:b1:6a:97:9c:
                    63:2e:b7:19:19:14:77:c9:71:ae:78:72:0d:70:49:
                    6a:d8:64:71:ad:4d:9b:18:b8:4c:22:01:fc:4d:1a:
                    b3:f1:81:63:38:fb:a7:d9:f0:8e:bd:b0:5f:df:fb:
                    db:7d:96:d2:37:d1:07:13:7e:68:da:5c:ff:fb:99:
                    24:38:bd:b9:33:66:47:97:8a:23:cb:c7:8e:df:c3:
                    24:b1:cd:d3:68:ce:af:d8:32:eb:3f:70:c8:64:e6:
                    25:b7:9d:14:a1:39:a4:a5:76:8a:2b:6c:bf:1a:f1:
                    db:df:8f:62:25:8c:60:69:15:f7:96:8c:e9:80:cd:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BF:53:D8:61:D6:A7:25:A0:DD:9E:8F:20:CB:C7:BB:11:E4:83:3D
            X509v3 Authority Key Identifier:
                keyid:46:E8:48:50:83:5B:77:08:EC:E5:E3:07:3F:FE:A7:A8:DF:9B:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ReLAaV4xbkck6iW8RecStyxe3RA6N5h7hcDXABxYi5u/0/46E84850835B7708ECE5E3073FFEA7A8DF9BEA60.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e5:13:b4:0d:b5:dc:b1:bb:ce:05:8d:9d:f9:da:54:6d:61:
         93:dc:22:bb:f8:4b:8e:32:fd:b0:d3:00:0f:f3:a1:b1:e1:76:
         10:0b:f9:45:8c:1e:17:c2:1c:ed:6e:b0:61:87:71:7e:9a:20:
         04:aa:67:14:4a:5c:96:03:f4:82:1f:75:ce:e6:d6:2f:39:6b:
         f9:b6:41:60:2b:d3:34:5e:5b:1f:e3:92:7f:f7:6f:1a:d1:67:
         6c:dc:5c:48:ad:04:b8:f0:96:a3:f0:87:bd:22:3a:6f:cf:de:
         c0:36:32:5d:74:c0:15:14:c3:1a:66:6d:32:b9:e2:0b:1a:f7:
         44:7d:6a:51:0a:52:ec:10:66:d1:92:f0:ea:85:9d:4c:5e:b1:
         3c:50:96:a8:dc:e6:bb:90:df:53:16:1d:fb:02:9c:12:1e:04:
         30:1a:33:98:e3:8d:c1:0d:f6:27:64:89:ab:8f:08:86:27:17:
         21:01:17:43:40:62:50:1c:ff:c8:b5:fc:59:13:3b:49:c2:f8:
         f0:39:ea:c1:fa:38:d3:8a:cc:de:19:05:f2:fc:ea:c9:9d:21:
         d4:6e:66:59:2e:1e:be:ec:9c:53:c2:68:cd:4c:92:ec:45:ca:
         4f:c0:f0:2a:1f:0a:95:1e:c7:ce:30:43:25:9f:42:80:5d:09:
         5a:72:f6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:01:50 2025 by rpki-client